Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 716 of 1013.
- CVE-2026-32772 Information disclosure in inetutils
- CVE-2026-32771 Monitoring is vulnerable to Archive Slip due to missing checks in sanitization
- CVE-2026-32770 Parse Server: LiveQuery subscription with invalid regular expression crashes server
- CVE-2026-3277 Information disclosure in PowerShell Universal
- CVE-2026-32769 Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace
- CVE-2026-32768 Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace
- CVE-2026-32767 SiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API
- CVE-2026-32766 astral-tokio-tar insufficiently validates PAX extensions during extraction
- CVE-2026-32763 SQL Injection via unsanitized JSON path keys when ignoring/silencing compilation errors or using `Kysely<any>`.
- CVE-2026-32762 Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing
- CVE-2026-32761 File Browser has an Authorization Policy Bypass in its Public Share Download Flow
- CVE-2026-32760 File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin
- CVE-2026-3276 Potential DoS via quadratic complexity in unicodedata.normalize()
- CVE-2026-32759 File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely
- CVE-2026-32758 File Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter
- CVE-2026-32757 Admidio: HTMLPurifier Bypass in eCard Message Allows HTML Email Injection
- CVE-2026-32756 Admidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files Module
- CVE-2026-32755 Admidio is Missing CSRF Protection on Role Membership Date Changes
- CVE-2026-32754 FreeScout: Stored XSS via Unescaped Email Template Rendering ({!! $thread->body !!})
- CVE-2026-32753 FreeScout: Stored XSS through SVG file upload with filter bypass
- CVE-2026-32752 FreeScout: Broken Access Control in ThreadPolicy — Any User Can Read/Edit All Customer Messages
- CVE-2026-32751 SiYuan Vulnerable to Remote Code Execution via Stored XSS in Notebook Name - Mobile Interface
- CVE-2026-32750 SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes
- CVE-2026-3275 Tenda F453 httpd addressNat fromAddressNat buffer overflow
- CVE-2026-32749 SiYuan importSY/importZipMd: Path Traversal via multipart filename enables arbitrary file write
- CVE-2026-32748 Squid has Denial of Service in ICP Response handling
- CVE-2026-32747 SiYuan: Incomplete sensitive path blocklist in globalCopyFiles allows reading /proc and Docker secrets
- CVE-2026-32746 Memory corruption in inetutils
- CVE-2026-32745 Misconfiguration in Datalore
- CVE-2026-32743 PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling
- CVE-2026-32742 Parse Server session creation endpoint allows overwriting server-generated session fields
- CVE-2026-32741 libheif has a heap buffer overflow in decode_mask_image()
- CVE-2026-32740 libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing
- CVE-2026-3274 Tenda F453 httpd L7Prot frmL7ProtForm buffer overflow
- CVE-2026-32739 libheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup
- CVE-2026-32738 libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk
- CVE-2026-32737 Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace
- CVE-2026-32736 Hytale Modding Wiki has Insecure Direct Object Reference / GDPR PII Exposure
- CVE-2026-32735 Unpacking Arbitrary Mustache Template Files via `maven-dependency-plugin`
- CVE-2026-32734 baserCMS: Multiple vulnerabilities in baserCMS
- CVE-2026-32733 Halloy has a file transfer path traveral vulnerability
- CVE-2026-32732 XSS in @leanprover/unicode-input-component
- CVE-2026-32731 ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction
- CVE-2026-32730 ApostropheCMS MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token Middleware
- CVE-2026-3273 Tenda F453 httpd AdvSetWrlsafeset formWrlsafeset buffer overflow
- CVE-2026-32729 Runtipi has a TOTP two-factor authentication bypass via unrestricted brute-force on `/api/auth/verify-totp`
- CVE-2026-32728 Parse Server has a stored XSS filter bypass via Content-Type MIME parameter and missing XML extension blocklist entries
- CVE-2026-32727 SciTokens: Authorization Bypass via Path Traversal in Scope Validation
- CVE-2026-32726 SciTokens C++: Sibling-Path Authorization Bypass
- CVE-2026-32725 SciTokens C++: Relative Path Traversal Vulnerability
- CVE-2026-32724 PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition
- CVE-2026-32723 SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)
- CVE-2026-32722 Memray-generated HTML reports vulnerable to Stored XSS via unescaped command-line metadata
- CVE-2026-32721 LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal
- CVE-2026-32720 Improper Access Control in github.com/ctfer-io/monitoring
- CVE-2026-3272 Tenda F453 httpd DhcpListClient fromDhcpListClient buffer overflow
- CVE-2026-32719 AnythingLLM has a Zip Slip Path Traversal and Code Execution via Community Hub Plugin Import
- CVE-2026-32718 Coolify read-scoped API tokens can perform state-changing validation operations
- CVE-2026-32717 AnythingLLM access control bypass: suspended users can continue using Browser Extension API keys
- CVE-2026-32716 SciTokens: Authorization Bypass via Incorrect Scope Path Prefix Checking
- CVE-2026-32715 AnythingLLM Manager Privilege Bypass Allows Access to Admin-Only System Preferences
- CVE-2026-32714 SciTokens vulnerable to SQL Injection in KeyCache
- CVE-2026-32713 PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors
- CVE-2026-32712 Open Source Point of Sale has Stored XSS in Customer Name (Sales)
- CVE-2026-32711 pydicom: Path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root
- CVE-2026-32710 Heap-based Buffer Overflow in MariaDB
- CVE-2026-3271 Tenda F453 httpd P2pListFilterof fromP2pListFilter buffer overflow
- CVE-2026-32709 PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete)
- CVE-2026-32708 Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot)
- CVE-2026-32707 PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop
- CVE-2026-32706 PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet
- CVE-2026-32705 PX4 autopilot BST Device Name Length Can Overflow Driver Buffer
- CVE-2026-32704 SiYuan renderSprig: missing admin check allows any user to read full workspace DB
- CVE-2026-32703 OpenProject's repository files are served with the MIME type allowing them to be used to bypass Content Security Policy
- CVE-2026-32702 Cleanuparr has Username Enumeration via Timing Attack
- CVE-2026-32701 Qwik has array method pollution in FormData processing, allowing type confusion and DoS
- CVE-2026-32700 Devise has a confirmable "change email" race condition that permits user to confirm email they have no access to
- CVE-2026-3270 psi-probe PSI Probe Whois Whois.java lookup server-side request forgery
- CVE-2026-32699 FacturaScripts unauthorized modification of immutable nick field via EditUser controller
- CVE-2026-32698 OpenProject has a SQL Injection via Custom Field Name that can be chained to Remote Code Execution
- CVE-2026-32697 Missing authorization in SuiteCRM-Core
- CVE-2026-32696 Null dereference in nanomq
- CVE-2026-32695 Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass
- CVE-2026-32694 Insecure Direct Object Reference attack via predictable secret ID in Juju
- CVE-2026-32693 Unauthorized access to Kubernetes secrets in Juju
- CVE-2026-32692 Unauthorized update of out-of-scope Vault secrets
- CVE-2026-32691 Timing ownership claim attack on new external back-end secrets
- CVE-2026-32690 Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1
- CVE-2026-3269 psi-probe PSI Probe Session ExpireSessionsController.java handleRequestInternal denial of service
- CVE-2026-32689 Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix
- CVE-2026-32688 Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy
- CVE-2026-32687 SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3
- CVE-2026-32686 Unbounded exponent in decimal enables unauthenticated DoS
- CVE-2026-32685 Path Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write
- CVE-2026-32684 Misconfiguration in Hik-Connect APP
- CVE-2026-32683 Information disclosure in EZVIZ APP
- CVE-2026-32682 NGINX Gateway Fabric vulnerability
- CVE-2026-32680 Misconfiguration in RATOC RAID Monitoring Manager for Windows
- CVE-2026-3268 psi-probe PSI Probe Session Attribute RemoveSessAttributeController.java access control
- CVE-2026-32679 Other in CanonNWCamPlugin.exe